[miakh]

Completes the remaining current admin actions through shared Flutter/MCP owners: people and roles, blueprint drafts and ticket artwork, program and activities, bounded history/exports, banks/cards, and occasion/organizer lifecycle. Delegated operations retain live typed authorization, stored resource scope, versions and immutable receipt identities.

• Copy recovery now resumes one committed occasion and a durable media manifest through the canonical image Worker. Deterministic object keys survive lost responses; later user-selected images are preserved. Occasion deletion retains detached blobs, matching the existing application behavior.
• Bank administration keeps both account-admin and management of the selected actually linked non-demo organizer. Card pause/disconnect, legal identity, physical order/history deletion and unit deletion share receipted application boundaries. Existing provider recovery remains authoritative; refund admission decisions do not issue refunds.
• Audit/report projections and closed-column paged exports preserve canonical SQL values. Private preview/export artifacts survive separate HTTP requests, bind their connection and reauthorize every read. Hosted artwork keeps its runtime readiness gate.
• Four source-frozen forward migrations, explicit scopes and six language pairs cover 193 registered remote tools and 109 documented actions. Published migrations and the previous production release receipt are unchanged.

Validation: 38 disposable PostgreSQL/SDK domain cases, 67 MCP/HTTP/context/save cases, 41 web consent/account cases, 47 Edge cases, 123 image Worker cases, affected Flutter components and clean targeted Dart/TypeScript analysis. Final tightened scope guards were retested in the affected SQL suites; source/parity checks (including 9 Python cases), all migration freezes, the renderer contract and generated catalogue pass. Exact commands and source digests are in docs/reports/admin-authoring-final-evidence-2026-10-27.json.

Production remains unchanged. Stages 6-10 require normal review and a separately authorized coherent backend/Edge/Worker/MCP/web rollout. Human OAuth/credential onboarding and tenant-wide verification review retain their existing application flows; no generic bulk-mail or provider-refund issuance tool was invented.